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DETAILED ACTION 
Response to Arguments 

Applicant's arguments, see REMARKS, filed 8/22/2005, with respect to the 
rejection(s) of claim(s) 1-24 under Blakley et al. US 5,708,812 and Mehring et al. US 
6,609,1 15 B1 have been fully considered and are persuasive. Therefore, the rejection 
has been withdrawn. However, upon further consideration, a new ground(s) of rejection 
is made in view of Blakley, III et al. US 5,832,21 1 . 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-24 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Blakley, III et al. U.S. Patent 5,832,211 [Blakley], and further in view of Mehring et 
al. U.S. Patent 6,609,115 B1 [Mehring] 

As per claims 1,16 and 22: 
Blakley discloses: 

Read selected unencrypted data from source datastore. For example Col. 7, 
lines 35-37. 
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Blakley does not expressly show, convert unencrypted data to be compatible 
with target datastore; and populate target datastore with the converted data. 

However these differences are only found in the nonfunctional descriptive 
material and are not functionally involved in the steps recited. The migration steps, 
taught by Blakley, teach about the migration of data from a Source Domain to a Target 
Domain. Col. 10, lines 46-67, that may be customer-tailored according to the user's 
particular needs, would be performed the same regardless of the data. 

Thus, this descriptive material will not distinguish the claimed invention from the 
prior art in terms of patentability, see In re Gulack, 703 F.2d 1381 , 1385, 217 USPQ 
401, 404 (Fed. Cir. 1983); In re Lowry, 32 F.3d 1579, 32 USPQ2d 1031 (Fed. Cir. 
1994). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to read selected data be it unencrypted or encrypted 
data from source datastore; convert unencrypted/encrypted data to be compatible with 
target datastore; and populate target datastore with the converted data, because such 
data does not functionally relate to the steps in the method claimed and because the 
subjective interpretation of the data does not patentably distinguish the claimed 
invention. 

Blakley further discloses: 

Receive an identification from a user seeking access to information protected 
by the target user authenticator. For example Col. 7, lines 17-35. 
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Locate the corresponding identification in the target datastore and determine 
whether the target datastore includes a password associated with the identification. 
For example Col. 11, lines 44-55, Blakley teaches locating the corresponding 
identification in the target datastore, which includes a password, associated with the 
user's identification. 

Receive a password from the user associated with the received identification. 
For example Col. 1 1 , lines 25-67. 

Blakley discloses the claimed invention except for if the target datastore does 
not include a password associated with the identification, then submits the received 
identification and received password to the source user authenticator. Mehring 
teaches that it is known in the art to provide if the target datastore does not include a 
password associated with the identification, then submit the received identification and 
received password to the source user authenticator. Col. 10, lines 49-67, Col. 11, lines 
1-10. It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to provide the authentication procedure Blakley with the if the 
target datastore does not include a password associated with the identification, then 
submit the received identification and received password to the source user 
authenticator of Mehring, in order to facilitate the use of the data during the migration 
phase of the data transfer. 

Further , it would have been obvious to one having ordinary skill in the art at the 
time of the invention was made to if the target datastore does not include a password 
associated with the identification, then submit the received identification and received 
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password to the source user authenticator since it is known in the art that during a data 
base migration period, if the target datastore does not include a password associated 
with the identification, then submit the received identification and received password to 
the source user authenticator. 

Monitor the source user authenticator for an approval response; for example 
Col. 8, lines 1-10, Col. 9, lines 34-67. 

Blakley discloses the claimed invention except for on receipt of an approval 
response from the source user authenticator populates the target datastore with the 
received password associating the received password with the corresponding 
identification. It would have been obvious to one having ordinary skill in the art at the 
time of the invention was made to on receipt of an approval response from the source 
user authenticator populate the target datastore with the received password 
associating the received password with the corresponding identification, since it is 
known in the art that to facilitate the complete transfer of data, when data is found 
missing from the original source, it is restored by the data from the original source. 

Authenticate the identification and password using the target user authenticator. 
For example Col. 23, lines 5-35. 

As per claim 2: 

Blakley further discloses: 

If, after determining whether the target datastore includes a password 
associated with the identification, the target datastore does include a password 
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associated with the identification, then authenticate the identification and password 
using the target user authenticator. For example Col. 7, lines 15-20. 

As per claim 3: 

Blakley further discloses: 

Receiving a password in a single submission from the user in conjunction with 
receiving the identification from the user. For example Col. 7, lines 15-35 

As per claims 4, 5, 17, 20 and 23: 

Blakley discloses the claimed invention except for the receiving a 
password in a submission from the user after the initial submission of the identification 
from the user. However, Blakley does disclose the use of a password and a 
corresponding unique account identification number. Col. 7, lines 15-20. Mehring 
teaches that it is known in the art to provide a receiving a password in a submission 
from the user after the initial submission of the identification from the user. Col. 10, 
lines 60-67. It would have been obvious to one having ordinary skill in the art at the 
time the invention was made to provide the password/unique identification element of 
Blakley with the receiving a password in a submission from the user after the initial 
submission of the identification from the user of Mehring, in order to increase the 
security in accessing data. Further, it would have been obvious to modify the teachings 
of Blakley, to provide the step of receiving a password in a submission from the user 
after the initial submission of the identification from the user. 
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Since the applicant has not disclosed that receiving a password in a submission 
from the user after the initial submission of the identification from the user, 
solves any stated problem in a new or unexpected way or is for any particular purpose 
which is unobvious to one of ordinary skill and it appears that the claimed feature does 
not distinguish the invention over similar features in the prior art since, the teachings of 
Blakley will perform the invention as claimed by the applicant with any means, method, 
or product to receiving a password in a submission from the user after the initial 
submission of the identification from the user. 

As per claims 6, 18, 21 and 24: 

Blakley discloses the claimed invention, as discussed above, except for the step 
of prompting for and receiving the identification and a password from the user after the 
initial submission of the identification from the user. It would have been an obvious to 
modify the teachings of Blakley to provide the step of prompting for and receiving the 
identification and a password from the user after the initial submission of the 
identification from the user. 

Since the applicant has not disclosed that prompting for and receiving the 
identification and a password from the user after the initial submission of the 
identification from the user solves any stated problem in a new or unexpected way or is 
for any particular purpose which is unobvious to one of ordinary skill and it appears that 
the claimed feature does not distinguish the invention over similar features in the prior 
art since, the teachings of Blakley will perform the invention as claimed by the applicant 
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with any means, method, or product to prompting for and receiving the identification 
and a password from the user after the initial submission of the identification from the 
user. 

As per claims 7: 

Blakley discloses the claimed invention except for the wherein the action of 
prompting for and receiving the identification and a password from the user after the 
initial submission of the identification from the user occurs after determining that the 
target datastore does not include a password associated with the identification; and, 
wherein the action further comprises using the source user authenticator to prompt for 
and receive the identification and a password from the user after the initial submission 
of the identification from the user. 

Mehring teaches that it is known in the art to provide wherein the action of 
prompting for and receiving the identification and a password from the user after the 
initial submission of the identification from the user occurs after determining that the 
target datastore does not include a password associated with the identification; and, 
wherein the action further comprises using the source user authenticator to prompt for 
and receive the identification and a password from the user after the initial submission 
of the identification from the user. 

It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to provide the security method of Blakley with wherein the action of 
prompting for and receiving the identification and a password from the user after the 
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initial submission of the identification from the user occurs after determining that the 
target datastore does not include a password associated with the identification; and, 
wherein the action further comprises using the source user authenticator to prompt for 
and receive the identification and a password from the user after the initial submission 
of the identification from the user of Mehring, in order to authenticate the user 
requesting the data. 

As per claims 8 and 9: 

Blakley discloses the claimed invention except for wherein while the source user 
authenticator is receiving the submitted password from the user, capturing the 
password provided by the user in response to the source authenticator prompting and 
using the captured password as the received password. 

It would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to wherein while the source user authenticator is receiving the 
submitted password from the user, capturing the password provided by the user in 
response to the source authenticator prompting and using the captured password as 
the received password since it is known in the art to use the password provided by 
the user in response to the source authenticator prompting and using the captured 
password as the received password. 
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As per claim 10: 

Blakley does not expressly show wherein the target datastore is an LDAP 
compliant directory service. However, Blakley does disclose about Open Systems 
Foundation (OSF) Distributed Computing Environment (DCE) For example Col. 5, 
lines 56-67, Col. 7, lines 1-10. The difference between the prior art and the 
application is only found in the nonfunctional descriptive material and is not functionally 
involved in the steps recited. The migrating steps would be performed the same 
regardless of the type of datastore involved. Thus, this descriptive material will not 
distinguish the claimed invention from the prior art in terms of patentability, see In re 
Gulack, 703 F.2d 1381, 1385, 217 USPQ 401, 404 (Fed. Cir. 1983); In re Lowry, 32 
F.3d 1579, 32 USPQ2d 1031 (Fed. Cir. 1994). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to use the type of datastore compatible with their 
system because the type of datastore does not functionally relate to the steps in the 
method claimed and because the subjective interpretation of the datastore does not 
patentably distinguish the claimed invention. 

As per claim 11: 

Blakley does not expressly show wherein the target datastore is a relational 
database. However, Blakley does disclose about Open Systems Foundation (OSF) 
Distributed Computing Environment (DCE) For example Col. 5, lines 56-67, Col. 7, 
lines 1-10. The difference between the prior art and the application is only found in 
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the nonfunctional descriptive material and is not functionally involved in the steps 
recited. The migrating steps would be performed the same regardless of the type of 
datastore involved. Thus, this descriptive material will not distinguish the claimed 
invention from the prior art in terms of patentability, see In re Gulack, 703 F.2d 1381, 
1385, 217 USPQ 401, 404 (Fed. Cir. 1983); In re Lowry, 32 F.3d 1579, 32 USPQ2d 
1031 (Fed. Cir. 1994). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to use the type of datastore compatible with their 
system because the type of datastore does not functionally relate to the steps in the 
method claimed and because the subjective interpretation of the datastore does not 
patentably distinguish the claimed invention. 

As per claims 12 and 13: 

Blakley does not expressly show wherein the source datastore is a relational 
database. However, Blakley does disclose about Open Systems Foundation (OSF) 
Distributed Computing Environment (DCE) For example Col. 5, lines 56-67, Col. 7, 
lines 1-10. The difference between the prior art and the application is only found in 
the nonfunctional descriptive material and is not functionally involved in the steps 
recited. The migrating steps would be performed the same regardless of the type of 
datastores involved. Thus, this descriptive material will not distinguish the claimed 
invention from the prior art in terms of patentability, see In re Gulack, 703 F.2d 1381 , 
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1385, 217 USPQ 401, 404 (Fed. Cir. 1983); In re Lowry, 32 F.3d 1579, 32 USPQ2d 
1031 (Fed. Cir. 1994). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to use the type of datastore compatible with their 
system because the type of data stores does not functionally relate to the steps in the 
method claimed and because the subjective interpretation of the data stores does not 
patentably distinguish the claimed invention. 

As per claim 14: 
Blakley further discloses: 

wherein the user is a person. For example Col. 7, lines 15-35. 

As per claim.15: 
Blakley further discloses: 
wherein the user is a software object. Foe example Col. 7, lines 15-35. 

As per claim 19: 

Blakley discloses the claimed invention except for intercepting a request to the 
source user authenticator from a user seeking access to information protected by the 
target user authenticator. Mehring teaches that it is known in the art to provide 
intercepting a request to the source user authenticator from a user seeking access to 
information protected by the target user authenticator. For example Col. 9, lines 15-50. 
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It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to provide the push/pull password system of Blakley, with the 
intercepting a request to the source user authenticator from a user seeking access to 
information protected by the target user authenticator of Mehring, in order to facilitate 
the approval of the user, with a minimum interaction by the user, to complete the 
authentication procedure. 

Blakley discloses the claimed invention except for prompting the user for an 
identification. However, Blakley does disclose the use of user identification . Mehring 
teaches that it is known in the art to prompting the user for an identification; receiving 
the identification from the user. Col. 10, lines 60-67. It would have been obvious to one 
having ordinary skill in the art at the time the invention was made to provide the 
password/unique identification element of Blakley with the prompting the user for an 
identification of Mehring, in order to increase the security in accessing data. Further, it 
would have been obvious to modify the teachings of Blakley, to provide the step of 
prompting the user for an identification. 

Since the applicant has not disclosed that prompting the user for an 
identification; receiving the identification from the user solves any stated problem in a 
new or unexpected way or is for any particular purpose which is unobvious to one of 
ordinary skill and it appears that the claimed feature does not distinguish the invention 
over similar features in the prior art since, the teachings of Blakley will perform the 
invention as claimed by the applicant with any means, method, or product to receiving a 
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password in a submission from the user after the initial submission of the identification 
from the user. 

locating the corresponding identification in the target datastore and determining 
whether the target datastore includes a password associated with the identification; For 
example Col. 7, lines 15-45. 

if the target datastore does include a password associated with the identification, 
then: authenticating the identification and password using the target user using the 
target user authenticator. Col. 7, lines 15-20. 

Examiner's Note: Examiner has cited particular columns and line numbers in the 
references as applied to the claims below for the convenience of the applicant. 
Although the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant, in preparing the 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the examiner. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Leah et al. US 6,986,038 B1 TECHNIQUE FOR 
SYNCHORNIZING SECURITY CREDENTIALS FROM A MASTER DIRECTORY, 
PLATFORM, OR REGISTRY. Discloses prompting of the user. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Daniel L. Greene whose telephone number is 571-272- 
6707. The examiner can normally be reached on M-Thur. 8am-6pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James P. Trammell can be reached on 571-272-6712. The fax phone 
number for the organization where this application or proceeding is assigned is 703- 
872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Daniel L. Greene 
Examiner 
Art Unit 3621 



1/10/2006 




